Red Hat Security AdvisoryRHSA-2015:1621
Red Hat JBoss Web Server 2.1.0 tomcat security update
Released 2015-08-13 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat JBoss Web Server 2.1
Fixes 2 records
Priority MEDIUM 59
Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of an entire request body, which allows remote attackers…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.20183 · Published 2015-06-07 · Partial fix · 6.0.44, 7.0.55 +1 CWE-399
Priority MEDIUM 44
The Expression Language (EL) implementation in Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.58, and 8.x before 8.0.16 does not properly consider the possibility of an accessible interface implemented by an inaccessibl…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.13349 · Published 2015-06-07 · Partial fix · 6.0.44, 7.0.58 +1 CWE-284